plugin/dnssec: fix NSEC-records (#1138)

* add NSEC-records if entry exists but the requested type is missing

* added test for dnssec fix
This commit is contained in:
Isolus 2017-10-08 13:28:35 +02:00 committed by Miek Gieben
parent c9bf91f1a7
commit c1b9f74f98
2 changed files with 22 additions and 1 deletions

View file

@ -49,7 +49,7 @@ func (d Dnssec) Sign(state request.Request, zone string, now time.Time) *dns.Msg
incep, expir := incepExpir(now)
if mt == response.NameError {
if mt == response.NameError || mt == response.NoData {
if req.Ns[0].Header().Rrtype != dns.TypeSOA || len(req.Ns) > 1 {
return req
}